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(57) ABSTRACT 

A method of registering biometric data is disclosed wherein 
a number of instances of input biometric data are accepted 
from a new user during a registration process. Each of these 
data samples are compared against existing templates to 
identify those templates posing a significant risk of confu- 
sion with a data sample. Those templates are identified and 
information relating to those templates is stored with the 
enrolled template of the new user. When a user is identified 
as the new user, the system automatically verifies that the 
data sample does not also result in identification as one of 
the identified templates. 

26 Claims, 19 Drawing Sheets 
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BIOMETRIC SECURITY ENCRYPTION example, in U.S. Pat. Nos. 5,109,427 and 5,233,404. Fin- 

SYSTEM gerprint identification devices of this nature are generally 

used to control the building-access or information-access of 
This is a continuation-in-part of U.S. patent application individuals to buildings, rooms, and devices such as com- 
Ser. No. 08/760,228, filed Dec. 4, 1996, now abandoned. 5 puter terminals. 

This is also a continuation of U.S . patent-application Ser. No. U.S. Pat. No. 4,353,056 in the name of Tsikos issued Oct. 
08/804,267 filed Feb. 21, 1997, now U.S. Pat. No. 6,038,334 5, 1982, discloses an alternative kind of fingerprint sensor 
and a continuation of U.S. patent application Ser. No. that uses a capacitive sensing approach. The described 
08/899,704 filed on Jul. 24, 1997, now U.S. Pat. No. sensor has a two dimensional, row and column, array of 
6,072,891. 10 capacitors, each comprising a pair of spaced electrodes, 

carried in a sensing member and covered by an insulating 
HELD OF THE INVENTION film, The sensors rely upon deformation to the sensing 

This invention relates generally to identification of indi- memb f r c ^ se <? b * a P laced *™*J so « to 

viduals and more particularly relates to a method of select- „ vary locally the spacmg between capacitor electrodes 

ing a biometric template for identification of individuals. 15 f ^ ordm * 10 ^ ndge/trough pattern of the fingerprint, and 

hence, the capacitance of the capacitors. In one arrangement, 

BACKGROUND OF THE INVENTION ^ e ca P ac i^ ors °f each column are connected in series with 

the columns of capacitors connected in parallel and a voltage 

Computer security is fast becoming an important issue. is applied across the columns. In another arrangement, a 

With the proliferation of computers and computer networks 20 voltage is applied to each individual capacitor in the array, 

into all aspects of business and daily life— financial, Sensing in the respective two arrangements is accom- 

medical, education, government, and communications— the plished by detecting the change of voltage distribution in the 

concern over secure file access is growing. A common ser i es connected capacitors or by measuring the voltage 

method of providing security is using passwords. Password values 0 f me individual capacitances resulting from local 

protection and/or combination type locks are employed for 25 deformation. To achieve this, an individual connection is 

computer network security, automatic teller machines, tele- required from the detection circuit to each capacitor, 

phone banking, calling cards, telephone amwermg services, Before tne advent of computers md devices 

houses and safes. T^ese systems generaUy require the rese arch was conducted into fingerprint characterisation and 

knowledge of an entry code that has been selected by a user identificatiorj . Today> much of me research focus 

in biomet- 

or has been preset. 30 ^ haj . been directed toward i mpr0 ving the input transducer 

Preset codes are often forgotten, as users have no reliable and the quality of the biometric input data. A second 

method of remembering them, Writing down the codes and important issue to be addressed is the identification process 

storing them in close proximity to the access control device itself and more particularly, the registration process. 

(i.e. the combination lock) results in a secure access control A common method of registering users for a b i ome tric 

system with a very insecure code. Alternatively, the nuisance 35 identification system is to capture biometric input 

of trying several code variations renders the access control ^^^^ characterise it, and store it as a template. The 

system more of a problem than a solution. same ^ ±en provides biometric input information to the 

Password systems are known to suffer from other disad- system for identification. This is repeated several times and 
vantages. Usually, a user specifies a password. Most users, 4Q if identification is successful, the user and their biometric 
being unsophisticated users of security systems, choose template are registered. Further, the system requires an 
passwords that are relatively insecure. As such, many pass- experienced operator to accept or reject instances of bio- 
word systems are easily accessed through a simple trial and metric information intended as templates, 
error process. ^ further method of registering users for a biometric 

A security access system that provides substantially 45 identification system is to capture a plurality of instances of 
secure access and does not require a password or access code biometric input information from a same user and to char- 
is a biometric identification system. A biometric identifica- acterise each instance. A composite biometric template is 
tion system accepts unique biometric information from a then constructed in dependence upon the plurality of 
user and identifies the user by matching the information instances provided. Such a system is complicated and it 
against information belonging to registered users of the 50 requires an experienced operator to accept or reject instances 
system. One such biometric identification system is a fin- of biometric information intended for template construction, 
gerprint recognition system. 

In a fingerprint input transducer or sensor, the finger under OBJECT OF THE INVENTION 

investigation is usually pressed against a flat surface, such as It is an object of this invention to provide a means of 

a side of a glass plate; the ridge and valley pattern of the 55 selecting a biometric template or biometric information from 

finger tip is sensed by a sensing means such as an interro- which to derive a template. 

gating light beam. It is an object of the invention to provide a method of 

Various optical devices are known which employ prisms training users to more effectively use biometric identifica- 

upon which a finger whose print is to be identified is placed. tion systems. 

The prism has a first surface upon which a finger is placed, 60 C TT\>r\,f adv nc tut: Tm/cMnnM 

a second surface disposed at an acute angle to the first SUMMARY OF THE INVENTION 

surface through which the fingerprint is viewed and a third In accordance with the invention there is provided a 

illumination surface through which light is directed into the method of identifying an individual presenting a biometric 

prism. In some cases, the illumination surface is at an acute information source to a system. The method comprises the 

angle to the first surface, as seen for example, in U.S. Pat. 65 steps of: 

Nos. 5,187,452 and 5,187,748. In other cases, the illumina- receiving a biometric information sample from the bio- 

tion surface is parallel to the first surface, as seen for metric information source of the individual; 
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characterising the biometric information sample; 
comparing the characterised biometric information 
sample against some of a plurality of stored templates 
to identify a template that closely matches the charac- 
terised biometric information sample; 5 
determining further templates from the plurality of stored 
templates, the further templates determined from data 
associated with the identified template; 
comparing the characterised biometric information 
sample against a template from the further templates to 10 
determine a likelihood that the characterised biometric 
information sample closely matches the template from 
the further templates; and 
identifying the individual when a match between the 
characterised biometric information sample and the 15 
template from the further templates has a likelihood 
outside a first range of likelihoods. 
In accordance with the invention there is provided a 
method performing one of user authorisation and user iden- 
tification for use in a system wherein biometric data are 20 
stored in a database. The method comprises the steps of: 
providing a biometric information sample; 
comparing data based on the biometric information 
sample and the biometric data to locate data within the 
biometric data that is indicative of a substantial match 25 
with the biometric information sample; 
determining further information from data associated with 
the located data indicative of a substantial match, the 
further data indicative of biometric data that has a 3Q 
known potential for indicating false acceptance; com- 
paring the data based on the biometric information 
sample and the further data from the database to 
provide comparison results; and, 
when the comparison results are indicative of no further 35 
substantial matches with the biometric information 
sample, performing at least one of user authorisation 
and user identification. 
In accordance with the invention there is provided a 
method of identifying comparisons indicative of potential 4Q 
false for use in a system wherein biometric data are stored 
in a database. The method comprises the steps of: 
comparing data based on a biometric information sample 
associated with first data within the biometric data and 
the biometric data to locate second data within the 45 
biometric data that is indicative of a substantial match 
with the biometric information sample to provide com- 
parison results; and, 
when a comparison result is indicative of a substantial 
match and the second data is other than the first data, 59 
storing information in association with the first data the 
information indicative of the second data. 
In accordance with the invention there is provided a 
method of storing data relating to biometric information in 
a database for use in identifying individuals. The method 55 
comprises the steps of: 
storing data associated with a first biometric information 

sample and a corresponding identification; and, 
storing a list of data associated with other biometric 
information corresponding to other identifications 60 
within the database, some of the biometric data asso- 
ciated with the other biometric information having a 
significant similarity to data associated with the first 
biometric information sample. 
In accordance with the invention there is provided a 65 
method of registering biometric information from a source, 
comprising the steps of: 
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providing an instance of biometric information from the 
source; 

storing a template relating to the provided biometric 
information in a database comprising a plurality of 
templates; 

comparing the biometric information against a further 
template to determine a likelihood that the biometric 
information matches the further template; 
when the likelihood is within a first range of likelihoods, 
storing data relating to the further template in associa- 
tion with the data based on the biometric information. 
In an embodiment when the likelihood is within the first 
range of likelihoods, storing data relating to a biometric 
information source selected so as to distinguish between the 
provider of the previously stored biometric information and 
the provider of the biometric information from which the 
further template is determined. 

In accordance with the invention there is provided a 
method providing an instance of biometric information from 
the source; 

storing a template relating to the provided biometric 
information in a database comprising a plurality of 
templates; 

comparing previously stored biometric information 
against the stored template to determine a likelihood 
that the previously stored biometric information 
matches the stored template; and, 
when the likelihood is within a first range of likelihoods, 
storing data relating to the previously stored biometric 
information associated with the data based on the 
biometric information. 
The advantages of a system in accordance with this 
invention are numerous. For example, registration of autho- 
rized users requires little time and expense. The chance of 
deriving a biometric template from poor biometric informa- 
tion is greatly reduced. 

BRIEF DESCRIPTION OF THE DRAWINGS 

An exemplary embodiment of the invention will now be 
described in conjunction with the attached drawings, in 
which: 

FIG. la is a representation of a fingerprint image captured 
by an optical fingerprint imaging means; 

FIG. lb is a representation of another instance of a 
fingerprint image captured by an optical fingerprint imaging 
means imaging the same fingertip as that of FIG. la; 

FIG. lc is a representation of another instance of a 
fingerprint image captured by an optical fingerprint imaging 
means imaging the same fingertip as that of FIG. la; 

FIG. 2 is a flow diagram of a method of selecting a 
biometric template requiring 3 different biometric data sets 
in accordance with the invention; 

FIG. 3 is a flow diagram of a further method of selecting 
a biometric template requiring n biometric data sets; 

FIG. 4 is a flow diagram of a method of training users of 
a biometric input system according to the invention; 

FIG. 5 is a flow diagram of a method reducing false 
acceptance (incorrect registration) of users of a biometric 
identification system according to the invention; 

FIG. 6 is a flow diagram of a method of identifying the 
source of biometric input information in a system employing 
the method shown in the flow diagram of FIG. 5; 

FIG. 7 is a chart showing results from registrations using 
each of the fingerprint images of FIGS, la, lb> and lc as 
templates and the others as biometric input information; 
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FIG. 8 is a flow diagram of a method of providing 
biometric information according to the invention; 

FIG. 8b is a flow diagram of a method of providing 
biometric information and identifying a user in dependence 
thereon according to the invention; 5 

FIG. 9 is a simplified diagram of a user interface for 
entering parameters according to the invention; 

FIG. 9a is a simplified diagram of FIG. 9 with some 
parameters selected for entry; ^ 

FIG. 9b is a simplified diagram of a display having 
prompts thereon requesting provision of biometric informa- 
tion from predetermined biometric information sources; 

FIG. 10 is a flow diagram of another method of providing 
biometric information and identifying a user in dependence 15 
thereon according to the invention; 

FIG. 11 is a flow diagram of another method of providing 
biometric information and identifying a user in dependence 
thereon according to the invention; 

FIG. 12 is a flow diagram of another method of providing 20 
biometric information and identifying a user in dependence 
thereon according to the invention; 

FIG. 13 is a flow diagram of another method of providing 
biometric information and identifying a user in dependence 
thereon according to the invention; 25 

FIG. 14 is a flow diagram of another method of providing 
biometric information and identifying an individual in 
dependence thereon according to the invention; 

FIG. 15 is a flow diagram of another method of providing 3Q 
biometric information and identifying an individual in 
dependence thereon according to the invention; 

FIG. 16 is a probability distribution curve for individual 
identification using a biometric information sample; 

FIG. 17 is a two dimensional probability distribution 35 
surface for individual identification in dependence upon a 
plurality of biometric information samples; and 

FIG. 18 is a flow diagram of another method of providing 
biometric information and identifying an individual in 
dependence thereon according to the invention. , 40 

DETAILED DESCRIPTION 

The invention will be described with respect to finger 
print registration. The method of this invention is useful in 
other biometric template selection processes as well. 45 

Referring to FIGS, la, lb, and lc, a fingerprint is shown. 
A fingerprint is substantially unique and is identifiable by a 
series of criteria. These criteria include core size, core type, 
location of minutia, ridge spacing, ridge type, etc. Each 
feature can be located and stored for later registration of 50 
unknown prints. Unfortunately, accurately mapping out all 
features and determining registration based on partial prints 
and skewed prints is very time consuming; and, it is ben- 
eficial to minimize the time required to register a print. 
Therefore, not all features are analyzed to register each print. 55 

A comparison of the fingerprint of FIG. la, FIG. lb, and 
FIG. lc will show them to have a same source; however, a 
comparison of the images directly is difficult, as they are 
each different. Each time a person places a fingertip onto a 
fingerprint scanner, a slightly different image is captured. 60 
From one instance to another a fingerprint may be shifted, 
skewed, cover different parts of the fingertip or be applied 
with different pressure. Since each captured image is sub- 
stantially unique, it is likely that some images form better 
templates for registration than others. A method of selecting 65 
those fingerprints that form better templates is herein dis- 
closed. 
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Referring to FIG. 2 a flow chart of a method according to 
the present invention is shown. Three instances of biometric 
information in the form of finger prints are captured. As 
shown in the flow diagram, each instance is captured indi- 
vidually. Preferably all instances are captured in such a way 
as to simulate normal use. For example, when using a 
fingerprint sensor for unlocking a door, a person steps up to 
the door and presses their finger tip against the sensor. The 
person then steps away from the door and approaches the 
door from a second different angle. In this way, the finger- 
prints imaged by the sensor will better reflect a variety of 
possible fingerprints from a same user during normal opera- 
tion and each captured image is independent, excepting the 
relation to a known fingertip. 

Preferably, an operator ensures that each image is a "good 
fingerprint" prior to storing the image for characterization. 
Operator skill is not required when using the method of this 
invention, but may result in an improved template. 

Each fingerprint is then characterized. Fingerprint char- 
acterization is well known and can involve many aspects of 
fingerprint analysis. The analysis of fingerprints is discussed 
in the following references, which are hereby incorporated 
by reference: 

Xiao Qinghan and Bian Zhaoqi: An approach to Fingerprint 
Identification By Using the Attributes of Feature Lines of 
Fingerprint/' IEEE Pattern Recognition, pp 663, 1986 C. 
B. Shelman, "Fingerprint Classification — Theory and 
Application," Proc. 76 Carnahan Conference on Elec- 
tronic Crime Countermeasures, 1976. 

Feri Pernus, Stanko Kovacic, and Ludvik Gyergyek, 
"Minutaie Based Fingerprint Registration/* IEEE Pattern 
Recognition, pp 1380, 1980. 

J. A. Ratkovic, F. W. Blackwell, and H. H. Bailey, "Concepts 
for a Next Generation Automated Fingerprint System/* 
Proc. 78 Carnahan Conference on Electronic Crime 
Countermeasures, 1978. 

K. Millard, "An approach to the Automatic Retrieval of 
Latent Fingerprints/' Proc. 75 Carnahan Conference on 
Electronic Crime Countermeasures, 1975. 

Moayer and K. S. Fu, "A Syntactic Approach to Fingerprint 
Pattern Recognition," Memo Np. 73-18, Purdue 
University, School of Electrical Engineering, 1973. 

Wegstein, An Automated Fingerprint Identification System, 
NBS special publication, U.S. Department of Commerce/ 
National Bureau of Standards, ISSN 0083-1883; no. 500- 
89, 1982. 

Moenssens, Andre A., Fingerprint Techniques, Chilton 

Book Co., 1971. 
Wegstein and J. E Rafferty, The LX39 Latent Fingerprint 

Matcher, NBS special publication, U.S. Department of 

Commerce/National Bureau of Standards; no. 500-36, 

1978. 

Using the method of the present invention, a same char- 
acterization method is employed in characterizing each 
fingerprint. This allows for comparisons between character- 
ized images. Alternatively, a series of characterizations are 
performed on each fingerprint to determine a best fingerprint 
from which to select the template and a best characterization 
for the template. Use of multiple characterizations increases 
the overhead required to characterize a fingerprint during 
normal use. It will be apparent to those of skill in the art that 
when multiple characterizations are employed, only simi- 
larly characterized fingerprints are compared. The remainder 
of this description assumes the use of only one form of 
characterization. 

Each characterized image is selected, one at a time, and all 
other characterized images are registered against the 
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selected characterized image. The selected characterized Preferably, the same characterized images are registered 

image acts as a template and the remaining characterized against each template. Further preferably, the scores are 

images act as user input biometric information. This results added or averaged. 

in six registrations. For each characterized image (serving as Alternatively, the characterized image is modified prior to 

a template) a score is achieved. The score is based on the 5 storing it. The modifications include removing features that 

correlation between the characterized image (as template) f^ c ^ t0 matcn similar features in at least some of the other 

and the other characterized images. The six registrations characterized images. In this way, false features are reduced 

produce six different scores, two for each characterized ^ improved registration results. 

image which are compared. Alternatively, the scores for Most 5iometric identification systems work most effec- 

each characterized mage, as template are added or aver- dvel wheQ ^ simila / biometric i t informa . 

aged. The characterized image with the most desirable *■ L *• * L * i- i * *• & 

sS)re(s) is selected to be the template. The score(s) is(are) ilon ™ ch Ume the y. acce f a s y stem - p alse rejections often 

then compared to a threshold value to determine suitability result from experienced users of a biometnc input device 

When suitable, the image and the characterized image are ?f more specifically from poor presentation of biometnc 

stored and form the biometric information registration tern- information. 

plate. Alternatively, only the characterized image is stored. 15 Referring to FIG. 4, a further use of a method according 

When the scores are not suitable, the characterized images to tnis invention is automated training of users of biometric 

are discarded and the method is followed again. identification systems. A user provides a plurality of bio- 

Alternatively, only some characterized images are discarded metric input samples to a system. The system selects a 

and others are stored; the method is reapplied capturing only sample as a template according to the present invention and 

as many new images as are necessary in order to select a 20 reports on the resulting selected template and the resulting 

template. score(s). A first sample is discarded and replaced by a new 

In an alternative embodiment shown in FIG. 3, n instances sample. This is repeated for several trials until the template 

of biometric information in the form of fingerprints are and the score(s) are substantially similar between trials, 

captured. Preferably, the captured images are independent as Given that the score exceeds a predetermined threshold, it is 

described above. Each image is characterized to produce a ^ tnat ^ ^ T ^ prov iding biometric input information 

characterized image. At least some of the characterized lo the system mat ^ usea bl e for user identification, 

images are selected. Against each of the characterized I n using biometric information in the form of fingerprint 

images selected, some other characterized images are reg- ^ for usef identificatiori) false registration is a great 

istered. Should all characterized images be selected and rtJ .. c i ■ * *• • T ** c *u u- 

, • . 11 ■ *t- t- * 1.- concern. Often, false registration is a function of the bio- 

compared against all other images, the number of resulting 4 . . r . A « » iL ^ c 

comparison! is (n) (n-1). For each registration, a resulting 30 metnc fl * formatlon ™* •? ^ on the P art of « 

score is associated with the selected characterized image. identification system. Two different users may share many 

The scores associated with each selected characterized common features in their biometnc mformation, and 

image are compared and a characterized image with a most therefore, each may register as the other. In selecting 

desirable set of scores is identified. The scores of the templates, it would be advantageous to reduce false regis- 

identified characterized image are verified against a thresh- 3 ^ tration as much as possible. 

old value to ensure that the identified characterized image is Referring to FIG. 5, a method of using the present 

acceptable and the identified characterized image and the invention for reducing false registration is presented. Tem- 

associated image are stored as a template. Alternatively, only plates are selected according to a known method of selecting 

the identified characterized image is stored as a template. same. A plurality of images are captured for each individual 

Alternatively, a instances of biometric information in the 40 having a template. The images are each characterized and 

form of fingerprints are captured as shown in FIG. 3 and m their characterizations are stored. Each image is registered 

further instances of biometric information in the form of against every template to identify potential false acceptance, 

fingerprints are provided. Preferably, the further images are For large systems, such a task is very time consuming and 

selected to ensure a selected biometric template is unlikely would be best executed as a background task. When a 

to result in false registrations. The selection of the m 45 possible false registration is ideatified, a further template is 

instances is based on false authorizations that have occurred selected (from the images and characterized images) to 

with some templates. Alternatively, the selection of the m distinguish between correct and false registration. An iden- 

instances is based on the characterization of the n images. tifier of the further template is stored with the original 

Alternatively, the selection of the m instances is based on a template in a hierarchical fashion. The identifier, for 

random selection. Against each of the characterized images 50 example, is in the form of an identification of the biometric 

from the n instances, some other characterized images are information source. Optionally, information relating to the 

registered, as are characterized images from the m instances. template identified as having a potential for false registration 

For each registration, a resulting score is associated with the is also stored. The task executes until all images have been 

selected characterized image. Scores indicative of similari- registered against all templates. Thus, when an acceptance 

ties are desirable for registrations with characterized images 55 occurs, the system has information that none of a plurality 

from the n instances. Scores indicative of differences are potential false acceptances has occurred. The resulting reli- 

desirable for characterized images from the m instances. The ability of the system is thereby improved. When a very large 

scores associated with each selected characterized image are number of users are enrolled, such an improvement is 

compared and a characterized image with a most desirable statistically significant. 

set of scores is identified. Desirability of a set of scores is 60 Referring to FIG. 6, a flow diagram of a method of 
dependent on a predetermined level of security and on an identifying a user in dependence upon biometric input 
application in which biometric identification is being used. information is shown for a system employing a method of 
The scores of the identified characterized image are verified reducing false registration as described with reference to 
against a threshold value to ensure that the identified char- FIG. 5. A user provides biometric information in the form of 
acterized image is an acceptable template. Preferably, the 65 a fingerprint image. The image is characterized. The char- 
template results in no authorization of instances from the m acterized image is compared against templates to locate user 
instances. information. When a registration occurs (a template is 
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sufficiently similar to the biometric information provided) 
the system verifies that false registration is unlikely. When 
false registration is unlikely, registration is complete. When 
it is likely, the biometric information provided is compared 
to templates corresponding to each potential false registra- 5 
tion associated with the registered template. When no further 
registration occurs, the registration process is complete. 

When a further registration occurs, the registration pro- 
cess selects at least another template against which to verify 
the provided biometric information. This at least another 10 
template is stored associated with the templates against 
which registration has occurred. Selecting and storing the 
further template is described above with reference to FIG. 5. 
The further template improves the probability of distinguish- 
ing between each of the two potential false registrations 15 
identified. 

Referring to FIG. 7, correlation results are shown for the 
fingerprints of FIG. la, FIG. lb, and FIG. lc. The results 
indicate that registering a fingerprint on a second fingerprint 
is not commutative. As such, the number of registrations 20 
required to select a template can not be reduced by regis- 
tering each pair only one time. Of course, when a commu- 
tative registration algorithm is used, each pair only requires 
a single comparison. 

Alternatively, the method is employed with retinal 25 
scanned biometric information. Further alternatively, the 
method is employed with palm prints. Further alternatively, 
the method is employed with non image biometric data such 
as voice prints. 

Distinguishing Between Multiple User Identities 30 

One of the problems with a finger print biometric is that 
a segment of the population can have temporary or perma- 
nent skin conditions which cause poor image quality on the 
scanning device which in turn causes them to experience 
high false rejection rates. By allowing candidates to use 35 
more than one finger during authentication, lower thresholds 
for authentication are combined in a way which confirms 
identities yet does not compromise the level of false accep- 
tances for the system. 

Thresholds from a set of distinct fingerprints from a 40. 
candidate that would usually be rejected for being too 
insecure are combined according to this method to allow 
acceptance in dependence upon a plurality of biometric 
information samples. Thus a candidate lowers the chance of 
being falsely rejected by supplying multiple biometric infor- 45 
mation samples in the form of fingerprints for authentica- 
tion. 

Referring to FIG. 8, a flow diagram of an method of 
improving identification by using multiple biometric infor- 
mation samples is shown. Biometric information in the form 50 
of fingerprints is provided to a processor. According to the 
invention, a plurality of samples from at least two biometric 
information sources is provided. These samples are in the 
form of fingerprints, palm prints, voice samples, retinal 
scans, or other biometric information samples. 55 

Requiring an individual to enter biometric information 
samples from at least two biometric information sources 
allows for improved registration results and reduced false 
acceptance. For example, some individuals are known to be 
commonly falsely accepted or identified as taught above. 60 
The false acceptance taught above is a result of similarities 
between biometric information samples from a biometric 
information source of a registered individual and from a 
biometric information source of another registered indi- 
vidual. These similarities are often only present for a specific 65 
similar biometric information source such as a left index 
finger or a right thumb. The provision and registration of two 
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biometric information samples, reduces likelihood of simi- 
larity because, where before similarity of a single biometric 
information source resulted in false acceptance, now simi- 
larity in two different sources is unlikely. Therefore, requir- 
ing a minimum of two biometric information sources 
reduces a likelihood of false acceptance. The use of a 
plurality of varied biometric information sources in the form 
of retinal scans, voice prints, finger prints, palm prints, toe 
prints, etc. further reduces probability of false registration; it 
is unlikely that the varied biometric information from two 
individuals is similar. 

Similarly, requiring an individual to enter biometric infor- 
mation samples from at least two biometric information 
sources reduces the probability of false rejection. As the 
likelihood of false acceptance decreases, a lower threshold 
for acceptance becomes acceptable. Both false rejection and 
false acceptance are thereby reduced or, in other words, 
probability of accurate identification is improved. It is 
common, in building access systems to maintain a database 
of individuals within the building and to deny those indi- 
viduals access to the building a second time. In accordance 
with one embodiment of the present invention, decreasing 
false rejection is achieved by allowing a system to distin- 
guish between users currently within and those currently 
outside a building even when biometric information from 
one or more biometric information sources is similar. 

Each biometric information sample is associated with a 
biometric information source in the form of a fingertip, a 
retina, a voice, a palm, etc. The association allows for 
comparison between the biometric information sample and 
a template associated with the biometric information source. 
When an individual's identity is provided to the processor or 
is known, the biometric information sample is only com- 
pared to a single template associated with the biometric 
information source. Alternatively, the biometric information 
sample is compared against a plurality of templates. Com- 
paring biometric information samples is often referred to as 
registering the biometric information samples. Many meth- 
ods are known for performing the registration. Commonly, 
the biometric information sample is characterized according 
to a method specific to the template. The template and the 
characterized biometric information sample are compared to 
determine a registration value. The registration value is then 
used to determine identification; to provide access to a 
system or structure; to log access; to monitor use; for billing; 
or for other purposes. 

When an individual's alleged identity is not provided to 
the processor or known to the processor, the characterized 
biometric information is registered against templates stored 
in a database of templates in order to locate those registra- 
tions which are indicative of a predetermined characteristic. 
The characteristic is often identity but other characteristics 
are also known. Because a plurality of biometric information 
samples is provided, the registration against templates is for 
locating a plurality of templates that are indicative of a 
predetermined characteristic. When the characteristic is 
identity, the templates are from a same individual and the 
registration process tries to locate a set of templates that 
registers with the characterized biometric information 
samples resulting in a set of values indicative of accurate 
identification. 

Referring to FIG. 8b, a flow diagram of an embodiment of 
the invention for identifying an individual is shown. An 
individual seeking authentication by a user authorization 
system is presented with a parameter entry means. Parameter 
entry means are well known in the art of computer science. 
Some examples of parameter entry means include dedicated 
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switches; software for execution on a processor and for 
providing an individual with means for selecting or custom- 
izing parameters in the form of prompts, a command line, or 
a graphical user interface; cards or other storage means for 
provision to a device capable of reading stored parameters 5 
and providing them to a processor; wireless data entry; and 
voice data entry systems. 

Using the parameter entry means, the individual deter- 
mines biometric information sample parameters. The param- 
eters are selected from a known group of available param- 10 
eters. Examples of known groups of biometric information 
samples include (right index finger, left index finger, left 
thumb); (right index finger, voice); (retinal scan, voice); (left 
thumb, left middle finger); etc. Groupings reduce user entry 
requirements; however, groupings also reduce flexibility. 15 
Alternatively, parameters are entered when an individual 
selects from all available parameters in order to determine a 
group. For example, an individual is presented with a 
graphical display, as shown in FIG. 9, of biometric infor- 
mation sources in the form of fingers 11 and selects a 20 
number of samples for each source. When a voice recogni- 
tion system is incorporated into the user authorization 
system, an icon 12 representing voice is also displayed. 
When a retinal scanning system is incorporated, an icon 13 
representing the retinal scan is displayed. Other icons are 25 
displayed when corresponding biometric identification sys- 
tems are present. The individual enters parameters in the 
form of identifying biometric information sources and for 
each source a quantity of samples being provided. 

Preferably a minimum set of requirements exist which, 30 
though flexible, ensures sufficient levels of security. Requir- 
ing each individual to enter information from a minimum 
number of biometric information sources and perhaps a 
maximum number of samples from a same biometric infor- 
mation source allows for maintenance of at least a prede- 35 
termined security level. 

Once the parameters have been entered, the individual 
enters biometric information into the system in accordance 
with the parameters. Preferably, the parameters once 
selected are sent to a processor for analysis and the indi- 40 
vidual is prompted to enter each biometric information 
sample. Alternatively, the parameters and the biometric 
information are sent to a processor together. 

The biometric information provided by the individual is 
related to the parameters selected. For example, referring to 45 
FIG. 9a, when the individual selects left ring finger once, 
right thumb once, and right index finger once, the individual 
then provides a sample of a fingerprint from the left ring 
finger, a fingerprint sample from the right thumb and a 
fingerprint sample from the right index finger. Prompting, 50 
shown in FIG. 9b, allows the individual to select very 
complicated sets of biometric information sources or to 
select from predetermined sets without remembering the 
parameters and/or an order for the parameters. 

A biometric input means in the form of a live fingerprint 55 
scanning device is used to collect the biometric information 
in the form of images of fingerprints of the individual which 
are entered in a predetermined order. Each biometric infor- 
mation sample is identified. When the individual is 
prompted for a biometric information sample, the processor 60 
labels the samples. Alternatively, an individual enters 
parameters and biometric information simultaneously by 
entering a biometric information sample and identifying the 
sample as, for example, a specific fingerprint or a voice 
sample. Optionally, the individual is provided with a means 65 
of reviewing and accepting or discarding biometric infor- 
mation samples. 



The authentication procedure determines an independent 
sequence of comparison scores from the input provided by 
the candidate. This sequence is considered to be a point, 
hereinafter referred to as P, in n-dimensional vector space, 
R n . A threshold function h a : R"~*R is used to determine 
whether or not the point belongs to a set U a by PeU a ±5h a 
(P)^C a . The identity of the individual is confirmed if and 
only if PeU a . 

Since the sequence is independent, it is also applicable 
piecewise through evaluation of a single biometric informa- 
tion sample and then, should the first sample provide insuf- 
ficient likelihood of an accurate identification, provision and 
evaluation of subsequent biometric information samples 
follows. Further, the information resulting from the first 
evaluation is useful in assessing which biometric informa- 
tion samples will best distinguish between known individu- 
als. 

The biometric information sample identifiers are used to 
uniquely identify the input samples. Let I be the set of input 
images, I={ljl ^i^N}. For I^el, let Id ( - be the identifier of an 
image, let T f be the characterization or template of the 
image, and let T f * be the reference template of the image. 

Define the equivalence relation =, on the set I by 

The sets 

are equivalence classes that partition the set of input images 
into sets of images that belong to a same finger tip. There are 
n of these classes where l^n^N. 

When x is a set of all fingerprint templates generated by 
a given characterization algorithm and score: txt-*R is the 
measure generated by an associated matching algorithm, 
then we can construct a set of class representative, 1^, which 
contains one representative for each H*: 

/*={7,<tfJscore(7}, 7}*)=max {scored 7/)},l^JV} 

The set I^czl. is then a set of images of the distinct input 
fingerprints that achieve the highest scores. Alternatively, 
multiple samples of a same fingerprint are considered. For 
each lfil R , l^i^n, let x^score^, T,*) correspond to scores 
from the matching algorithm. Any ordering of these scores 
is a point in the vector space R", simply by constructing the 
n-tuple (x lf X2, . . . , x„)=R 

Essentially, as shown in FIG. 8, once a set of parameters 
is selected, a graphical distribution of identifications is 
achievable in n-dimensions. The biometric information 
samples are provided to a processor. Registration is con- 
ducted against known templates in dependence upon the 
selected parameters. Once registration is complete, a single 
point is determined having coordinates equal to each of at 
least some of the registration results. Alternatively, the ppint 
has coordinates determined in dependence upon the regis- 
tration results but not equal thereto. Plotting the point results 
in a point plotted in n-dimensional space. The processor then 
determines a probability distribution for the selected param- 
eters. Alternatively, this is performed prior to the registration 
process for biometric information samples. Further 
alternatively, the probability distributions are determined or 
approximated in advance and stored in non-volatile memory. 

Given an n-dimensional plot defined by a boundary 
function and a single point, a comparison determines 
whether or not the point falls below or above the function 
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and optionally within or outside other known ranges. Stated 
differently, the point is analyzed to determine whether it falls 
within a suitable region wherein region is defined as an 
n-dimensional region having at least some known bound- 
aries. When the point falls within a predetermined or suit- 5 
able region, the individual is identified. When the point falls 
outside the predetermined or suitable region, the individual 
is not identified. The identification system then responds 
accordingly. Responses in the form of locking an individual 
out, denying an individual access, logging an attempted 10 
entry by an unidentified individual, etc. are well known and 
are beyond the scope of the present invention. 

Referring to FIG. 10, a simplified flow diagram of another 
embodiment for user identification is shown. Biometric 
information samples are provided to a processor and asso- 15 
ciated with their biometric information sources in the form 
of finger tips, eyes, palm, or voice. The biometric informa- 
tion samples and the associated information are provided to 
a processor. The processor characterises the biometric infor- 
mation samples and registers them against templates. When 20 
the individual's alleged identification is known, registration 
is performed against templates associated with the indi- 
vidual and associated with same biometric information 
sources. Identification of an individual is conducted in a 
fashion similar to that set out for FIG. 8b above. Once a user 25 
is identified, data relating to the user and to a likelihood of 
false acceptance is read. The identification is used with the 
data to determine whether further biometric information 
samples are required. For example, when the data comprises 
identities of other users whose biometric information is 30 
similar to that of the identified user, a comparison of 
templates of each of the other users and the characterised 
biometric information indicates whether any of the other 
users is also a potential match. In an alternative 
embodiment, with each user identity is included a similarity 35 
indication to allow a determination of whether the identifi- 
cation with its known likelihood poses a significant possi- 
bility of false identification for said user identity. Thus, only 
user identities having a likelihood of being falsely accepted 
are verified. Of course, depending on the amount of data 40 
relating to each possible error in identification, different 
responses occur. Essentially, it is significant that information 
relating to errors in identification that have or could occur is 
stored with an identification and is then used to improve the 
identification results. 45 

In an embodiment, when a system in the form of a door 
access system has limited input and output capabilities, each 
biometric information sample is verified against a pertinent 
portion of the database of biometric templates. For access, 
for example, the pertinent portion comprises all individuals 50 
outside the secured area secured by the door. Upon provision 
of a first sample, the pertinent portion of the database is 
restricted to those individuals with a likelihood of having 
provided the first sample. This portion is likely substantially 
smaller than the previous pertinent portion. When the cur- 55 
rent pertinent portion comprises more than one individual or 
when the individual is identified with a likelihood that is 
insufficient for maintaining system security, more samples 
are required. 

In use of a doorway system, three LEDs can provide 60 
sufficient information for use of the system. A green LED 
indicates identification, a red LED indicates rejection and a 
yellow LED prompts for a further biometric information 
sample. Of course, the selection of LED colours and the 
design of a user interface are in accordance with a particular 65 
application. Even for a doorway, any of a number of user 
interface designs is compatible with the present invention. 



,805 Bl 

14 

Referring to FIG. 11, a simplified flow diagram of another 
method according to the invention is shown. A processor 
prompts an individual for biometric information samples 
associated with biometric information sources selected by 
the processor according to a predetermined algorithm. The 
predetermined algorithm uses data within the biometric 
information database to determine those individuals who are 
potentially misidentified with better than a predetermined 
likelihood. Samples are then selected to avoid misidentifi- 
cation as much as possible. Of course, statistical analysis of 
the database may provide sufficient information to determine 
a set of biometric information samples that is sufficient for 
all enrolled individuals. When the set is sufficiently small, its 
use may lend convenience and added security to the entire 
system. Optionally, the predetermined algorithm selects the 
biometric information sources in dependence upon a likely 
identity of the user. The biometric information samples are 
provided to the processor. The processor characterises the 
biometric information samples and registers them against 
templates. When the individual's alleged identification is 
known, registration is performed against templates associ- 
ated with the same biometric information sources of the 
individual and against templates associated with those indi- 
viduals who are potentially misidentified with better than a 
predetermined likelihood. 

Referring to FIG. 12, a simplified flow diagram of another 
method according to the invention is shown. Biometric 
information samples and associated parameters are provided 
to a processor. The processor characterises the biometric 
information samples and registers them against templates. 
When the individual's alleged identification is known, reg- 
istration is performed against templates associated with the 
individual and associated with same biometric information 
sources. Identification of an individual is performed by 
evaluating resulting values from the registration to 
determine, for those resulting values, a probability of false 
acceptance and false rejection. The probability of false 
acceptance is evaluated based on data stored in association 
with data relating to the individual, the stored data indicative 
of other individuals whose data is likely to register when the 
individual's data is in registration. The probability of false 
acceptance is further evaluated by comparisons with data 
associated with the other individuals. When the values are 
within predetermined limits for an acceptable value, iden- 
tification is provided. When the value falls outside the 
predetermined limits identification is not provided. 

Referring to FIG. 13, a simplified flow diagram of another 
method according to the invention is shown. Biometric 
information samples and associated parameters including an 
alleged identification of the individual are provided to a 
processor. The processor characterises the biometric infor- 
mation samples and registers them against templates, When 
the individual's alleged identification is known, registration 
is performed against templates associated with the indi- 
vidual and associated with same biometric information 
sources. Identification of an individual is performed by 
evaluating resulting values from the registration to deter- 
mine a probability, for those results, of false acceptance and 
false rejection. The probability of false acceptance is evalu- 
ated based on data stored in association with data relating to 
the individual indicative of other individuals whose data is 
likely to register when the individual's data is in registration 
and by further comparisons with data associated with the 
other individuals. When the value is within predetermined 
limits for an acceptable value, identification is provided. 
When the value falls outside the predetermined limits iden- 
tification is not provided. 
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Referring to FIG. 14, a simplified flow diagram of another 
method according to the invention is shown. Bio metric 
information samples and associated parameters are provided 
to a processor. The processor characterises the biometric 
information samples and registers them against templates. 5 
When the individual's alleged identification is known, reg- 
istration is performed against templates associated with the 
individual and associated with same biometric information 
sources. Identification of an individual is performed by 
evaluating resulting values from the registration to deter- 10 
mine a quality of user identification. One aspect of the 
quality relates to identified potential for false acceptance. In 
accordance with the invention, this identified potential pro- 
vides information indicative of other enrolled users who 1 
may also be accepted by a same biometric information 15 
sample and, therefore, by registering a current biometric 
information sample against templates associated with the 
other enrolled users, some false identifications are avoided. 
When the quality is within predetermined limits for an 
acceptable quality, identification is provided. When the 20 
value falls outside the predetermined limits identification is 
not provided. 

Referring to FIG. 15, a simplified flow diagram of another 
method according to the invention is shown. Biometric 
information samples from an individual and associated 25 
parameters are provided to a processor. The processor char- 
acterises the biometric information samples and registers 
them against templates. A first set of templates associated 
with an individual and associated with same biometric 
information sources is selected. Registration of the biomet- 30 
ric information samples is performed against the selected 
templates producing registration values. In dependence upon 
these values a quality of user identification is determined. 
Such a quality is similar to that described with reference to 
FIG. 14. When the quality is within predetermined limits for 35 
an acceptable quality, identification is provided. When the 
value falls outside the predetermined limits, identification is 
not provided and a next set of templates is selected. The 
selection of the next set is optionally performed in depen- 
dence upon a set of individuals that are likely to be identified 40 
according to the process. Optionally, once all sets of tem- 
plates are exhausted, an indication of failure to identify is 
provided. 

Referring to FIG. 16, a two dimensional probability 
distribution is shown. The total area below the distribution 45 
curve is 1 unit area. Using such a curve, false acceptance or 
false registration is described. Most biometric information 
samples are easily characterized. The high initial point on 
the probability curve and the steep decent to an asymptotic 
curve approaching 0 shows this. The line t marks the cutoff 50 
for registration effectiveness. This is determined in depen- 
dence upon an algorithm chosen and upon system limita- 
tions such as processor speed, memory, and security require- 
ments. The shaded region bounded by Y=0, X>t, and the 
probability curve represents false acceptances. 55 

Referring to FIG. 17, a truncated two dimensional prob- 
ability distribution curve is shown. Now, false acceptance is 
represented by a region of three dimensional space having a 
volume of 1 or less units. Upon viewing the graph of actual 
data for fingerprint biometric information, it is apparent that 60 
the graph is symmetrical and that the graph extends toward 
infinity without reaching the plane z=0. Further, the diagonal 
center of the surface x»y is a minimum for a given x and y. 

A plot showing an acceptance curve for registration is 
contained below the curve of FIG. 17. Here two parameters 65 
either from separate registrations or from a same biometric 
information sample registration are evaluated to determine a 
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point. When the point falls below the line, the biometric 
information is not identified and correspondingly the indi- 
vidual is not identified. Alternatively, when the point falls 
within the shaded region, registration occurs. Extending this 
to a plurality of biometric information samples results in 
regions allowing for excellent registration of some samples 
with moderate registrations of other samples. Using a plu- 
rality of biometric information samples, allows equivalent 
registration algorithms to provide greatly enhanced security 
or Alternatively, allows faster and simpler registration algo- 
rithms to provide equivalent security. 

In evaluating security of biometric authorization systems, 
false acceptance and false rejections are evaluated as a 
fraction of a user population. A security system is charac- 
terized as allowing 1 in 1,000 false acceptances or, 
alternatively, 1 in 1,000,000. Extending the graph of FIG. 18 
to n dimensions, results in a different distribution for a 
region representing acceptance and, therefore, a match 
scores of a single biometric information sample that falls 
outside the shaded region of FIG. 17, when combined with 
several other similarly weak biometric information samples, 
is more likely to fall within an acceptable region. A reason- 
able correlation among several identifiers is a good indica- 
tion of identity. Alternatively, using only a single biometric 
information sample, a low match score results in failure to 
authorize an individual. Likewise, a different individual 
entering a plurality of biometric information samples and 
trying to gain unauthorized access by, for example, posing as 
an authorized individual, is unlikely to match evenly across 
all samples and, whereas a single biometric information 
sample may match well, several will not. Further examina- 
tion of an acceptance graph shows that excellent match 
scores of some samples reduce the necessary match scores 
for other samples for authorization to occur. 

The probability density function is discussed below. 
Assume a probability density function, f, of non-match 
scores exists. That is, 

Jtt-fl), l] 

and 

!,>■> 

If S={x|x=score(T a , T fc ), where T a and T b are character- 
izations of distinct fingerprints}, then f is 0 outside of S, and 

!'■£'='• 

It should be noted that X€S-*x^0 since score is a measure. 
An n-dimensional probability density function, g for a 
sequence of non-match scores is constructed by: 

n 

Since each f(x^0, then it follows that g(P)i0 and that 

For any subset U c= S", the probability that a collection of n 
scores of non-matching fingerprints lies in U is given by: 
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then it follows that 



Given an n-dimensional probabihty density function, g, a f (H f 1 f frr i 

region, U^cS" is defined, bounded "below" by a function, B J^-i^H /<*>J/W^J djrl = J^U **>' 



Given an n-dimensional probability density function, g, a 
region, U tt 
h a : R w — *R 

U^{P^\h a (P)^C a }. 10 

C„ a constant, is calculated such that: 



wo* 



I £ = 



Repeatedly applying iterated integrals in such a manner, 
eventually results in 



15 



f 



Thus, given a collection of n fingerprint match scores in 

the form of a point P, we determine when PeU a by applying Wnen U c_R n , the probabihty that a collection of n scores of 

the threshold function h a . Moreover, the probabihty that 20 non-matchmg fingerprmts lies^in U is calculated by iterated 

such a collection of scores belongs to U a is a which can be mte gra over rectangles in R by. 
interpreted as a predetermined false acceptance rate. The 

criteria ( g= I g-X* 



25 



Pe U 
P£ U 



where U_c_R, and R is a rectangle in R", and %u is the 
is used to accept the candidate when true, and reject the characteristic function of the set U 
candidate otherwise. 

Test Case 30 = 

A large sample consisting of several million non-match 
comparisons has been generated from a database of finger- 
print images in order to create a relative frequency assuming that and / are integrable. In the discrete case, 

distribution, F(X) of non-matching fingerprint scores. 35 we analogously define 
X«score(T fl , T & ), where T a , T b €X are templates of different 

fingerprints. Note that the frequency distribution is a func- C(P) _ rr F ^ 

tion of a discrete variable. For the purposes of the test case, / 
we assumed that a continuous probabihty density function, 

f(x), of non-matching fingerprint comparisons exists, and all 40 P ^ ■ tU u u-v* a. **u * j * r 1 

A^L n *i^ « *u ♦ • G (P) S Lves the probability that then independent scores, {x,} 

derivations are performed for the continuous case. When a * * w c. *• 1 

. , A . r . , , , , 01 non-matchmg ringer prmts occur m a particular sequence, 

calculation was required in dependence upon actual data, f (Note mat g(p) does not ^ a probability at any spedfic 

was approximated by F, and integration was replaced by point since ^ G meaS ure, and hence the integral, over a single 
summation. pomt is 

When we are given a sequence of n non-matching finger- 45 For purposes of calculating false acceptance rates in 
print scores, {x,}, l^i^n, then an n-dimensional probability n-dimensions, we must attempt to construct regions in R" 
density function, g, is derived as follows: Let that have desirable properties. Suppose that a and P are false 

acceptance rates. We would like to define regions U a , U p 

P-(*i> . . . , jO -^- r " sucn tnat: 

50 

be a particular ordering of the sequence. f g = aimd f g=fl (1) 

Define Ju * JtJ 0 

U a = {Pe FKiP) * C a h U^iPe 5"| V* 7 ) =M O (2) 

55 

(3) 



h*(P) = C Q *>g(P)*K a , hfiW-Cp + giP)*^ (4) 



since 



60 The first condition simply defines a false acceptance rate as 
f / _ ff - f^ffx) dx-Y a P r °k a bi utv * ^ ne second condition indicates that regions are 

Jr ~ Js X *~ bounded below by a threshold function where C a , C p are 

non-negative constants. The third condition states that when 
a point is a member of a false acceptance region with a lower 
6 5 probability, it also belongs to a false acceptance region 
associated with a higher probabihty. One way to achieve this 
R n ^P n ~ l xR is to have h^hp, (i.e. use the same function) and let C p ^ C a . 
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The last condition attempts to ensure that points along or 
proximate the region boundaries retain substantially level 
contours on the n-dimensional probability density function. 
This reduces uneven boundaries "favouring" certain com- 
binations of match scores. 5 

It is worth noting that corresponding n-dimensional false 
rejection rates are calculated assuming that an analogous 
n-dimensional probability density function, g* is con- 
structed from the probability density function of fingerprint 
match scores. The corresponding false rejection rate for an 
n-dimensional false rejection rate a is given by: 

f ** 

Js"-u a 

15 

Alternatively, the method is employed with retinal > 
scanned biometric information. Further Alternatively, the 
method is employed with palm prints. Further Alternatively, 
the method is employed with non image biometric data such 
as voice prints. 20 

One consequence of two different biometric sources is 
that the above math is complicated significantly. As a false 
acceptance rate for fingerprints may differ significantly from 
that of voice recognition devices or retinal scans, a different 
f(x) arises for the two latter cases resulting in asymmetric 25 
regions. For only fingerprint biometric information, ordering 
of samples is unimportant as false acceptance rates are 
substantially the same and therefor, the regions defined for 
registration are symmetrical as shown in FIG. 18. When 
different biometric source types are used and different func- 30 
tions for false acceptance result, order is important in 
determining point coordinates and an axis relating to voice 
recognition false acceptance should be associated with a 
coordinate value for same. 

Referring to FIG. 18, a method of improving security 35 
without requiring performance of additional steps by most 
individuals is shown. A user presents biometric information 
to a biometric input device. The information is characterised 
and the characterised information is matched against a 
template. When a successful registration occurs, data asso- 40 
ciated with the successfully registered template is retrieved 
and from that data, other templates are identified that are 
similar. Comparison with those templates is performed to 
determine whether the registration was unique. When the 
registration is unique, user identification is made and the 45 
process is complete. When an unsuccessful registration 
occurs, the user is prompted for other biometric information. 
Optionally, the system prompts for each biometric informa- 
tion source a plurality of consecutive times. 

For example, a user presents their index finger to a 50 
fingerprint scanner, registration fails and access is denied. 
The user again presents their index finger to the fingerprint 
scanner; registration fails and access is denied. The user 
again presents their index finger to the fingerprint scanner; 
registration fails and access is denied. The user is prompted 55 
to present their middle finger to the fingerprint scanner. 
Alternatively, the user selects and identifies their middle 
finger as the next biometric information source, The regis- 
tration of the middle finger is performed according to the 
invention and therefore is not a same registration process as 60 
when the middle finger is the first finger presented to the 
scanner. The registration relies on the best registration value 
from the index fingerprints and, with the registration results 
from the middle finger, determines whether identification 
should proceed. When unsuccessful registration occurs, the 65 
middle finger is presented two more times. When registra- 
tion is still unsuccessful, another biometric source is 
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requested or is selected by the user. Optionally, when 
registration results fall below a predetermined threshold, 
user identification fails. Alternatively, user identification 
fails when known biometric information sources of the user 
are exhausted. Of course, whenever a resulting registration 
value considered with previous registration values according 
to the invention results in a sufficiently accurate 
identification, data relating to the identification and indica- 
tive of potential errors in identification is retrieved and 
evaluated. Comparisons with other templates in accordance 
with the retrieved data are performed. When the compari- 
sons result in no substantial matches, identification of the 
individual results. Otherwise, further fingerprints are pre- 
sented to the fingerprint scanner until only one substantially 
correct identification results. 

Advantages to this method are that the convenience of 
current fingerprint registration systems is retained for a 
many individuals; for a number of individuals, an extra 
fingerprint sample from another finger is required; and, from 
a small number of individuals, several fingerprints are 
required. The number is dependent on fingerprint quality, 
fingerprint characterisation process, desired level of 
security, population size, distinctiveness of biometric 
information, etc. It is evident to those of skill in the art that 
when individuals are enrolled, biometric information from a 
plurality of biometric information sources is provided, char- 
acterised and associated/stored with their identification. 

Because of the nature of, for example, fingerprints, the use 
of multiple fingerprints from a same individual provides an 
additional correlation as discussed herein. In an 
embodiment, with each fingerprint presented, analysis and 
registration provides one of three results — identified, 
rejected, unsure. When unsure, more biometric information 
is requested. The individual provides additional fingerprint 
data and again one of the three results is provided. When a 
final identification or a rejection occurs, the process stops. 
Optionally, a log of access attempts is maintained for later 
review. 

In a further refinement of the embodiment, the processor 
prompts a user for their identity. When the user provides 
identification, biometric information is requested from 
sources in an order that is most likely determinative of the 
user identity. 

For example, when biometric information from an index 
finger is provided and registered but fails to sufficiently 
identify the user, further biometric information is requested. 
The biometric information requested is selected such that a 
highest likelihood of identification results. Alternatively, the 
biometric information source is selected such that a highest 
likelihood of rejection results. Should the next sample of 
biometric information fail to be determinative — 
identification or rejection, further biometric information 
from another source is requested again attempting to make 
a final determination fastest. 

When a user identity is not provided, a data structure 
indicating a next biometric information source to request is 
produced from all biometric information. In dependence 
upon a registration value of a current biometric information 
sample, user identification, rejection, or requesting further 
biometric information results. In the latter case, the 
requested information is determined based on the known 
biometric information and registration values associated 
therewith. For example, biometric information is provided 
from a first biometric information source. Registration is 
performed and is inconclusive. It is determined that a 
particular biometric information source comprises informa- 
tion most likely to result in identification or failure thereby 
being determinative; that biometric information source is 
polled. 
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When selecting subsequent biometric information 
sources, preferably, all possible outcomes are analysed and 
the outcome of failed identification is not itself considered a 
single outcome but is weighted more heavily. The advan- 
tages to this approach are evident from the example below. 5 

In another example for use in identifying individuals by 
searching a database of enrolled individuals, biometric 
information is provided from a right thumb. Registration is 
performed and is inconclusive determining that the right 
thumb is likely that of John, Susan, or Peter but may also be 10 
that of Jeremy, Gail, or Brenda. Reviewing data associated 
with John, Susan, or Peter, it is determined that Joe is 
sometimes confused with each of these three. A next bio- 
metric information source is selected such that clear dis- 
crimination between the individuals results and a likely 15 
identification will occur. The next biometric information 
source is one that easily eliminates a large number of the 
potential individuals. In this example, the right ring finger is 
selected because Susan and Peter have very distinctive ring 
fingers. Biometric information from the right ring finger is 20 
provided and registered with templates in the database. 
Though the right ring finger is most likely that of Jim or 
Susan, it is evident that Susan, appearing in both lists, is the 
front runner. Data associated with Jim is retrieved and it is 
determined that Susan is sometimes erroneously identified 25 
as Jim. Also, the registration result for Peter is sufficiently 
low that it is unlikely that Peter is the individual. Though 
neither registration value would identify Susan on its own 
with the desired level of security, when the two registrations 
are taken together, Susan is indeed identified. Alternatively, 30 
when the resulting list is still not conclusive — two or more 
people identified or no one identified with sufficient 
certainty, further biometric information from another bio- 
metric information source is requested. 

The data is arranged such that in dependence upon 35 
previous registration results a next biometric information 
source is polled. Using such a system, searching large 
databases for accurate registration is facilitated and reliabil- 
ity is greatly increased. Preferably, the database is precom- 
piled to enhance performance during the identification pro- 40 
cess. 

In another embodiment, templates are formed by charac- 
terising a plurality of fingerprints of an individual and 
constructing a single composite template comprising finger- 
print information from each fingerprint. Using such a com- 45 
posite template, identification of biometric information 
sources is obviated. For example, an individual provides a 
fingerprint to a biometric imaging device. The imaged 
fingerprint is provided to a processor. The processor need 
not be provided with information regarding the biometric 50 
source — the exact finger — in order to perform template 
matching. The fingerprint is registered with a single com- 
posite template to produce a registration value. The regis- 
tration value is used to identify the individual, prompt the 
individual for another fingerprint, or reject the individual. 55 

Methods of forming composite templates include select- 
ing a plurality of features from each fingerprint, selecting 
similar features from each fingerprint, forming a data struc- 
ture indicative of fingerprint identification and indicative of 
features, etc. In an embodiment a data structure comprises a 60 
first feature to verify. When present, a next feature or set of 
features is verified. When absent a different feature or set of 
features is verified. By providing the data in a tree structure 
such as a binary tree, finger and registration values are 
identified simultaneously. Also, a data structure allows for 65 
compilation of a known group of biometric information, e.g. 
10 fingerprints, for use with the present invention wherein 



identification is dependent upon a plurality of different 
biometric information samples. 

Alternatively, single composite templates having a plu- 
rality of features from each fingerprint are formed by map- 
ping selected features and information regarding the features 
into the composite template. This allows for a processing of 
the template against a characterised fingerprint to produce a 
registration value. Often, the registration process using 
composite templates is different from that using individual 
templates. 

Another method of forming composite templates is to 
form templates having finer and finer resolutions each 
associated with a smaller group of templates. For example, 
a first coarse template determines whether or not to match 
the characterised fingerprint against other finer templates. In 
use, a fingerprint is compared against coarse templates. 
When a match within predetermined limits occurs, finer 
templates associated with the coarse template are also 
matched against the fingerprint. When the match is not 
within predetermined limits, the finer templates associated 
with the coarse templates and all finer templates associated 
therewith are excluded from further matching. This 
improves performance of the individual identification sys- 
tem. 

The arrangement of data for the present method is similar 
to that of a tree structure. A coarse template may be a same 
template for different finer templates. Therefore, registration 
is performed against a small number of coarse templates in 
order to limit the number of finer templates. The process is 
repeated at each node of the tree until an identification of the 
individual or until a most likely node is determined. Further 
biometric information from a different biometric informa- 
tion source is registered in a similar fashion. Because each 
node as one descends throughout the tree structure toward 
the leaves is related to fewer individuals, an intersection of 
potential individuals from each search determines potential 
identifications. Preferably, more than one potential node is 
identifiable with each biometric information source. For 
example, registration of the index finger results in a selection 
of two nodes — a and b. Each node is associated with a 
number of individuals. Registration of the middle finger is 
associated with three different nodes — c, d, and e. An 
intersection (aUb)n(cUdUe) results in potential identifica- 
tions. When the intersection contains a small number of 
individuals, registration against individual templates is per- 
formed according to the method and using each biometric 
sample provided from a different biometric information 
source in order to identity the individual with a predeter- 
mined level of security. 

Of note, when using different biometric information 
sources, an asymmetric probability distribution results. This 
often makes determination of threshold functions more 
difficult. In an embodiment, when an asymmetry exists in the 
probability distribution function, weighting of registration 
values is used. This allows for balancing of inconsistencies 
in registration processes for different biometric information 
sources or, alternatively, more emphasis on certain biometric 
information sources than on others. 

Numerous other embodiments may be envisaged without 
departing from the spirit and scope of the invention. 

What is claimed is: 

1. A method of identifying an individual comprising the 
steps of: 

a) receiving a biometric information sample from a bio- 
metric information source of the individual; 

b) characterising the biometric information sample; 

c) comparing the characterised biometric information 
sample against some of a plurality of stored templates 
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to identify a template that closely matches the charac- 
terised biometric information sample, wherein some 
templates belong to different individuals; 

d) based upon data stored associated with the identified 
template and indicative of further templates relating to 5 
different individuals from the plurality of stored tem- 
plates that are each similar to the identified template 
and are potentially confusing therewith, determining 
further templates relating to further individuals differ- 
ent from the individual to which the identified template 1Q 
relates; 

e) verifying the identified template by performing the step 
of comparing the characterised biometric information 
sample against a template from the further templates to 
determine a likelihood that the characterised biometric 
information sample closely matches the template from 1 
the further templates; and 

f) identifying the individual based on the identified tem- 
plate when a match between the characterised biomet- 
ric information sample and the template from the 
further templates has a likelihood outside a first range 20 
of likelihoods. 

2. A method of identifying an individual as defined in 
claim 1 wherein the step of comparing the characterised 
biometric information sample against a template from the 
further templates to determine a likelihood that the charac- 25 
terised biometric information sample closely matches the 
template from the further templates is performed for each 
template from the further templates and wherein the step of 
identifying the individual is performed when each of the 
determined likelihoods is outside a first range of likelihoods. 30 

3. A method of identifying an individual presenting a 
biometric information sample to a system as defined in claim 
1 comprising the step of: 

prompting the individual to present the biometric infor- 
mation source when the likelihood is within a first 
range of likelihoods. 

4. A method of identifying an individual presenting a 
biometric information sample to a system as defined in claim 
1 comprising the step of: 

prompting the individual to present a further different 
biometric information source when the likelihood is 
within a first range of likelihoods. 

5. A method of identifying an individual presenting a 
biometric information sample to a system as defined in claim 45 
4 wherein the first biometric information source is a fingertip 
and the further biometric information source is a fingertip 
from a different finger of the individual. 

6. In a system wherein biometric data are stored in a 
database, a method of performing one of user authorisation 5Q 
and user identification comprising the steps of: 

a) providing a biometric information sample; 

b) comparing data based on the biometric information 
sample and the biometric data to locate data of different 
individuals within the biometric data that is indicative 55 
of a substantial match with the biometric information 
sample; 

c) determining further data from data associated with the 
located data indicative of a substantial match, the 
further data indicative of biometric data relating to 60 
individuals other than an individual to whom the 
located data indicative of a substantial match relates 
that has a known potential for allowing determination 

of a false acceptance between biometric data and the 
located data; 65 

d) verifying the identified template by performing the step 
of comparing the data based on the biometric informa- 
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tion sample and the further data from the database to 
provide comparison results indicating likely data that is 
a substantial match and likely data that is not a correct 
substantial match and would result in a false accep- 
tance; and, 

e) when the comparison results are indicative of one 
substantial match with the biometric information 
sample, performing at least one of user authorisation 
and user identification in dependence upon the one 
substantial match, 

7. A method of performing one of user authorisation and 
user identification as defined in claim 6 comprising the step 
of: 

when the comparison results are indicative of a further 
substantial match with the biometric information 
sample, prompting for a further biometric information 
sample. 

8. A method of performing one of user authorisation and 
user identification as defined in claim 7 wherein the further 
biometric information sample is a biometric information 
sample from a different biometric information source. 

9. A method of performing one of user authorisation and 
user identification as defined in claim 6 wherein the step of 
comparing data based on the biometric information sample 
and the biometric data is performed only until a first com- 
parison indicative of a substantial match with the biometric 
information sample results. 

10. A method of performing one of user authorisation and 
user identification as defined in claim 6 wherein the step of 
performing at least one of user authorisation and user 
identification comprises performing user identification. 

11. In a system wherein biometric data are stored in a 
database, a method of identifying comparisons indicative of 
potential false acceptance comprising the steps of: 

comparing data based on a biometric information sample 
associated with first data within the biometric data and 
the biometric data to locate second data related to 
another individual within the biometric data that is 
indicative of a substantial match with the biometric 
information sample to provide comparison results; and, 

when a comparison result is indicative of a substantial 
match and the second data is other than the first data, 
storing information in association with the first data the 
information indicative of the second data. 

12. A method of identifying comparisons indicative of 
potential false acceptance as defined in claim 11 wherein the 
step of comparing data is performed until the biometric 
information sample is compared with the biometric data to 
identify each possible match. 

13. A method of identifying comparisons indicative of 
potential false acceptance as defined in claim 11 wherein a 
substantial match is a comparison wherein the likelihood of 
a match is above a predetermined threshold. 

14. A method of identifying comparisons indicative of 
potential false acceptance as denned in claim 11 wherein the 
information is indicative of identification. 

15. A method of identifying comparisons indicative of 
potential false acceptance as defined in claim 11 wherein the 
biometric data comprises templates derived from biometric 
information, the templates for comparison with captured 
biometric data. 

16. A method of storing data relating to biometric infor- 
mation in a database for use in identifying individuals 
comprising the steps of: 

storing data associated with a first biometric information 
sample and a corresponding identification of an indi- 
vidual; and, 
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storing a list of data associated with other biornetric 
information samples corresponding to identifications of 
other individuals within the database, some of the 
biornetric data associated with the other biornetric 
information samples having a significant similarity to 
data associated with the first biornetric information 
sample. 

17. A method of storing biornetric information in a 
database for use in identifying individuals as defined in 
claim 16 wherein the biornetric information is fingerprint 
data. 

18. A method of registering biornetric information from a 
source, comprising the steps of: 

a) providing an instance of biornetric information from 
the source; 

b) storing a template relating to the provided biornetric 
information in a database comprising a plurality of 
templates; 

c) comparing the biornetric information against a further 
template of a different individual to determine a like- 
lihood that the biornetric information matches the fur- 
ther template; 

d) when the likelihood is within a first range of 
likelihoods, storing data relating to the further template 
for use in distinguishing between the stored template 
and the further template to potentially reduce a number 25 
of false acceptances and false rejections in association 
with the data based on the biornetric information. 

19. A method of registering biornetric information from a 
source as defined in claim 18 comprising the step of storing 
the determined likelihood that the biornetric information 30 
matches the further template in association with the data 
relating to the further template. 

20. A method of storing biornetric information in a 
database for use in identifying individuals as defined in 
claim 18 wherein the biornetric information is fingerprint 35 
data. 

21. A method of registering biornetric information in a 
database for use in identifying individuals as defined in 
claim 18 comprising: 

providing a plurality of different instances of a same 40 
biornetric information of an individual from the bio- 
rnetric input device to a processor; 

selecting each instance of the plurality of different 
instances; 

for each selected instance comparing that selected 
instance with other of the different instances of a same 
biornetric information provided by the individual, and 
determining a registration value corresponding to simi- 
larities or differences between each selected instance; 
and, 
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selecting as the biornetric template an instance from the 
plurality of different instances for which the registra- 
tion value is within predetermined limits. 

22. A method of registering biornetric information from a 
source as defined in claim 18 comprising the step of: 

when the likelihood is within the first range of likelihoods, 
storing data relating to a biornetric information source 
selected so as to distinguish between the provider of the 
previously stored biornetric information and the pro- 
vider of the biornetric information from which the 
further template is determined. 

23. A method of registering biornetric information from a 
source, comprising the steps of: 

a) providing an instance of biornetric information from 
the source; 

b) storing a template relating to the provided biornetric 
information in a database comprising a plurality of 
templates; 

c) comparing previously stored biornetric information of 
different individuals against the stored template to 
determine a likelihood that the previously stored bio- 
metric information related to a different individual 
matches the stored template; and, 

d) when the likelihood is within a first range of 
likelihoods, storing data relating to the previously 
stored biornetric information and related to a different 
individual associated with the data based on the bio- 
metric information. 

24. A method of registering biornetric information from a 
source as defined in claim 23 comprising the step of storing 
the determined likelihood that the biornetric information 
matches the further template in association with the data 
relating to the further template. 

25. A method of storing biornetric information in a 
database for use in identifying individuals as defined in 
claim 23 wherein the biornetric information is fingerprint 
data, 

26. A method of registering biornetric information from a 
source as defined in claim 23 comprising the step of: 

when the likelihood is within the first range of likelihoods, 
storing data relating to a biornetric information source 
selected so as to distinguish between the provider of the 
previously stored biornetric information and the pro- 
vider of the biornetric information from which the 
stored template is determined. 
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